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i 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

: 

Listing of Claims: 

1 • (Original) A method of delivering data content from a data content provider to a customer 
processing platform and compiling use of the daja con tent at the customer processing platform, 
comprising: 

encrypting each of a plurality of sections of the data content using a respective one 
of a plurality of encryption keys to produce a corresponding plurality of encrypted sections; 

delivering the plurality of encrypted sections to the customer processing platform; 
and i 

delivering to the customer processing platform a plurality of decryption keys 
corresponding to the plurality of encryption keys, Wherein the decryption keys are delivered in a 
manner such that the customer processing platfornj has simultaneous possession of at most a 
subset of the plurality of decryption keys at any time. 

2. (Original) The method of claim 1, wherein delivering to the customer processing platform a 
plurality of decryption keys comprises: 

delivering to the customer processing platform a first key of the plurality of 
decryption keys for a first encrypted section of flic plurality of encrypted sections; 

delivering to foe customer processing platform a second key of the plurality of 
decryption keys for a second encrypted section of die plurality of encrypted sections; and 

causing the first key to be destroyed at the customer processing platform. 

3. (Original) The method of claim 1 , wherein delivering to the customer processing platform a 
plurality of decryption keys comprises: 

i 
t 

i 
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delivering to the customer processing platform a current key of the plurality of 
decryption keys for a current encrypted section of the plurality of encrypted sections to be 
processed at the customer processing platform; i 

delivering to the customer processing platform a next key of the plurality of 
decryption keys for a next encrypted section of the plurality of encrypted sections to be 
subsequently processed at the customer processing platform upon completion of processing of 
the current encrypted section; and 

! 
! 

causing the current key to be destroyed at the customer processing platform. 

4. (Original) The method of claim 3, wherein delivering to the customer processing platform a 
next key of the plurality of decryption keys and cajusing the current key to be destroyed at the 
customer processing platform are repeated for each of the plurality of encrypted sections to be 
subsequently processed. 

5. (Original) The method of claim 3, wherein tbi current encrypted section is a first one of the 
plurality of encrypted sections, and wherein delivering to the customer processing platform a 
next key of the plurality of decryption keys and cajtsing the current key to be destroyed at the 
customer processing platform are repeated for each of the plurality of encrypted sections 
following the first encrypted section. 

6. (Original) The method of claim 1 , wherein delivering to the customer processing platforin a 
plurality of decryption keys comprises: 

i 

providing key control software to thjj customer processing platform, the key 
control software being adapted to: j 

! 

receive a decryption key for one of the plurality of encrypted sections; 

i 

complete decryption of the one section; and 

i 

destroy the decryption key. ' 
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7. (Original) The method of claim 1 further comprising: 

billing a customer for delivery of jthe encrypted sections, and then hilling the 
customer each time the data content is used at thf customer processing platform. 

8- (Original; The method of claim 1, wherein the data content i s video content ormusic 
content, and wherein use of the data content at the customer processing platform comprises 
decryption and playback of the data content. 

9. (Ongina.) The method of claim 1, wherein c^ch of the plurality of encryption keys comprises 
a respective symmetric cryptographic key, and whjercin each of the plurality of decryption keys 
comprises the symmetric cryptographic key of its Corresponding encryption key. 

10. (Original) The method of claim 1, further comprising: 

generating each of the plurality of encryption keys using an identifier associated 
wtth the customer processing platform, to thereby generate a plurality of customer processing 
plai form-specific keys. 

1 1. (Original) The method of claim 10, wherein generahng comprises generating each of the 
plurality of customer processing platfonn-specific keys using the identifier and a respective key 
generation seed value. 

1 2. (Original) The method of claim 1 1, wherein delivering to the customer processing platfonn a 
plurahty of decryption keys compnses delivering tfje respective key generation seed values. 

,13. (Original) The method of claim 1, further comprising: 

generating a respective transmission lvalue for each of the plurality of encryption 
keys using an !denti fier associated with the customdr processing platform. 



wherein delivering to the customer pfocessmg platform a plurality of decrypt* 
keys comprises delivering the transmission values, i 



on 
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14. (Original) The method of claim 1, further comprising: 

delivering the plurality of encrypted sections from the customer processing 
platform to a second customer processing platfoijm; and 

i 

i 

delivering the plurality of decryption keys from the data content provider to the 
second customer processing platform, wherein thje decryption keys are delivered in a manner 
such that the second customer processing platfonja has simultaneous possession of at most a 
suhset of the plurality of decryption keys at any tune. 

15. (Original) A computer-readable medium storing instructions which, when executed by a 
processor at a data content provider, perform a mithod according to claim 1 . 

1 6. (Original) A method of receiving and controlling playback of data content at a customer 
processing platform, comprising: 

receiving over a communications rjedium a plurality of encrypted sections of data 
content, each of which has been encrypted using ajrespective encryption key; and . 

! 

for each encrypted section: 

j 

receiving a decryption key in respect of the encrypted section; 
decrypting and playing back the encjrvpted section using the decryption key; and 
destroying the decryption key a/ler completing playback of the encrypted section. 

17. (Original) The method of claim 16, further coiipnsmg, for each encrypted section: 

destroying decrypted data content atjthc customer processing platform after 
completing playback of the encrypted section. 

18. (Original) The method of claim 16, wherein the communications medium is the public 
Internet. 
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19. (Original) The method of claim 16, wherein, for each encrypted section, the encryption key 
is the same as the decryption key, ; 

20. (Original) The method of claim 16, wherein jreceivmg the plurality of encrypted sections of 
the data content comprises receiving the plural^ of encrypted sections of the data content from 
another customer processing platform. 

21. (Original) A computer-readable medium storing instructions which, when executed by a 
customer processing platform, pcrfonn a method (according to claim 16. 

22. (Original) The method of claim 16, wherein jach encryption key comprises a respective 
customer processing platform-specific key which jis determined based on an TP address of the 
customer processing platform. 

23. (Original) The method of claim 16, wherein receiving each decryption key comprises 
receiving a transm.ssion value that is determined b|a 5 ed on the decryption key and a hardware 
identifier associated with the customer processing jplatform, further comprising, for each 
encrypted section: 



recovering the decryption key from 
24.-33.(Cancelicd) 



the transmission value. 



34. (Original) A method for controlling use of encrypted data content downloaded to a customer 
data content processing device, comprising: ; 

receiving a request comprising customer verification information from a customer 
data con tent processing device; j 



comparing the customer verification 
customer information ; and 



information with corresponding stored 



where the customer verification information is consistent with the stored customer 
verification information: 
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billing a usage charge to an accoimt of the customer 

transmitting to the customer data foment processing device a digital key to 
decrypt a current portion of the encrypted data content; and 

I 

for each subsequent portion of thej encrypted data: 

transmitting to the customer data content processing device a different key to 
decrypt the subsequent portion of the encrypted d'ata; and 

causing a key for a preceding portion of the encrypted data to be deleted from the 
customer data content processing device. 

35. (Previously Presented) A computer readable medium storing software code executable by a 
processing platform, the software code comprising: 

! 

first software code for coordinating downloading a plurality ofsections of data 
content each encrypted with a respective one of a plurality of encryption keys to a customer 
computer system from a data content service provider system or another customer computer 
system; and | 

second software code for establishing a connection with the data content service 
provider system to obtain permission to use the datja content, and for using the data content where 
permission is obtained from the data content service provider system by receiving a 
corresponding one of a plurality of decryption kcy^ for each encrypted section of data content and 
decrypting the encrypted sect.cn usmg the corresponding one of the plurality of decryption keys 
such that the processing platform has simultaneous 
of decryption keys at any time. 



possession of at most a subset of the plurality 



36. (Original) The computer readable medium of cjaim 35, wherein the second software code 
obtains further permissions from the data content service provider system to continue using the 
data content. 
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37. (Previously Presented) A signal embodied oij a transmission medium containing software 
code executable by a processing platform, the software code Comprising: 

! 

first software code for coordinating downloading a plurality of sections of data 
content each encrypted with a respective one of d plurality of encryption keys to a customer 
computer system from a data content service profider system or another customer computer 
system; and ! 

i 
i 

second software code for establishing a connection with the data content service 
provider system to obtain permission to use the dkta content, and for using the data content where 
permission is obtained from the data content service provider system by receiving a 
corresponding one of a plurality of decryption kc^s for each encrypted section of data content and 
decrypting the encrypted section using the corresponding one of the plurality of decryption keys 
such that the processing platform has simultaneous possesion of at most a subset of the plurality 
of decryption keys at any time. 

38. (Original) A system for delivering data content from a data content provider to a customer 
processing platform and controlling use of the datk content at the customer processing platform, 
comprising: 

means for encrypting each of a plurality of sections of the data content using a 
respective one of aplurality orencryption keys to produce a corresponding plurality of encrypted 
sections; i 

means for delivering the plurality of encrypted sections to the customer processing 
platform; and j 

means for delivering to the customejr processing platfomi a plurality of decryption 
keys corresponding to the plurality of encryption keys, wherein the decryption keys are delivered 
in a manner such that the customer processing platfomi has simultaneous possession of at most a 
subset of the plurality of decryption keys at any time. 
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39. (Original) The system of claim 38, wherein the customer processing platform comprises: 
means for requesting the data content to be delivered to the castomer i 



platform; 



means for receiving rhe plurality of encrypted sections; 



• processing 



means for receiving, for each encrypted section, the decryption key in respect of 
the encrypted section; 



key; and 



means for decrypting and playing back the encrypted section using the decryption 



means for destroying the decryptiojn key, after completing playback of the 
encrypted section. 

40. (Currently Amended) A data content distribution system comprising: 

i 

a data content server configured tojrcceive download requests and permission 
requests for data content, to encrypt a plurality of Sections of requested data content using 
respective encryption keys to thereby generate a plurality of encrypted sections and to transmit 
the encrypted sections of the data content in response to a received download request for the data 
content, and to transmit each of a plurality of decryption keys respectively corresponding to the 
- encryption keys in response to a permission request for the data content; and 

i 

a data content download controller configured to generate download requests, to 
receive encrypted sections of data content in response to download requests, to generate 
permission requests when downloaded data concern is to be used, and for each encrypted section 
of data content to be used, to receive a corresponding one of the plurality of decryption keys, and 
to decrypt the encrypted section using the corresponding one of the plurality of decryption keys; 
said data content server operable to transmit the plurality of rlerrvnti™ l^ vs ir, a m^r g „.h 
that the data content download controller has simultaneous V c^,^ n of at mosT a .„ hg .r pfthe 
plurality of decryptio n keys at any timg 
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4L (Original) The system of claim 40, comprising a data network connecting the data content 
server and the data content download controller. I 

42. (Original) The system of claim 41., further comprising a plurality of data content download 
controllers connected to the data network. \ 

! 

43. (Original) The system of claim 42, wherein each of the plurality of data content download 
controllers is implemented in conjunction with a respective customer computer system and is 
further configured to download encrypted sections of data content from other customer computer 
systems. 
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